Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Zendesk states that automated decision-making as defined under GDPR Article 22 does not currently apply to personal data processed under this notice, but commits to notifying affected individuals and providing human intervention rights if that practice changes.
This analysis describes what Zendesk's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision constitutes a disclosure about the current absence of Article 22 automated decision-making and a forward-looking commitment to notification and rights provision if such processing is introduced. Given that Zendesk describes itself as an 'AI-first service platform,' this disclosure is operationally significant for monitoring as Zendesk's AI capabilities develop.
Interpretive note: Whether Zendesk's AI-driven features in its products constitute Article 22 automated decision-making in the Processor context (excluded from this notice) depends on implementation details and Subscriber deployment configurations not addressed in this document.
Under this clause, EEA and UK data subjects are currently not subject to GDPR Article 22 automated decision-making within the scope of this notice. If this changes, the document commits to providing notification, explanation, and human intervention rights consistent with GDPR requirements.
Cross-platform context
See how other platforms handle GDPR Automated Decision-Making Disclosure and similar clauses.
Compare across platforms →Monitoring
Zendesk has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Right to Not Be Subject to Automated Decision-making. The types of automated decision-making referred to in Article 22(1) and (4) EU/UK General Data Protection Regulation ('GDPR') do not take place in connection with your personal data. Should this change, we will inform you about why and how any such decision was made, the significance of it, and the possible consequences of it. You will also have the right to human intervention, to express your point of view, and to contest the decision.Excerpt from Zendesk's Privacy Policy
1. REGULATORY LANDSCAPE: This provision directly engages GDPR Article 22, enforced by EU member state supervisory authorities and the UK ICO. Article 22 applies to solely automated decisions that produce legal or similarly significant effects on individuals. The EU AI Act may also engage with certain automated decision-making systems depending on their classification, though the notice does not address EU AI Act applicability. 2. GOVERNANCE EXPOSURE: Medium. Zendesk describes itself as an 'AI-first service platform' in the introduction to this notice, which creates a monitoring obligation for compliance teams to assess whether AI-driven features introduced in future product updates trigger Article 22 obligations. The document's forward-looking commitment to notification provides a disclosure hook but does not specify a mechanism or timeline for such notification. 3. JURISDICTION FLAGS: This provision applies to EEA and UK data subjects under GDPR and UK GDPR. The scope of Article 22 and the definition of 'legal or similarly significant effects' has been the subject of guidance from the European Data Protection Board, and compliance teams should assess whether Zendesk's AI features as implemented in products (not covered by this notice) may implicate Article 22 through Subscriber deployments. 4. CONTRACT AND VENDOR IMPLICATIONS: Organizations deploying Zendesk AI features for customer service automation should assess whether those deployments constitute Article 22 automated decision-making and, if so, whether their own privacy notices and consent mechanisms address this. Zendesk's Processor capacity for AI features is excluded from this notice and should be addressed in the applicable DPA. 5. COMPLIANCE CONSIDERATIONS: Legal teams should establish a monitoring process to identify when Zendesk introduces AI features that may trigger Article 22 obligations under this notice, and should review the adequacy of the notification commitment described in the notice. Data protection impact assessments may be required if Article 22 processing is introduced. The EU AI Act's requirements for high-risk AI systems should be assessed in parallel as Zendesk's AI product portfolio evolves.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision constitutes a disclosure about the current absence of Article 22 automated decision-making and a forward-looking commitment to notification and rights provision if such processing is introduced. Given that Zendesk describes itself as an 'AI-first service platform,' this disclosure is operationally significant for monitoring as Zendesk's AI capabilities develop.
Under this clause, EEA and UK data subjects are currently not subject to GDPR Article 22 automated decision-making within the scope of this notice. If this changes, the document commits to providing notification, explanation, and human intervention rights consistent with GDPR requirements.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zendesk.